551 Security Event ID



Hi,

Are 551 events ("user initiated logoff") only seen when logging out of "interactive" logons (Type 2), or can they occur for "Remote Interactive" logouts (Type 10)?

How about logouts from cached logons?

Any help appreciated.
A pointer where I can look this info up would be welcome too - I only see vagueness!

Thanks a lot,
Kevin

.